Update javascript/ql/src/semmle/javascript/frameworks/Markdown.qll

erik-krogh · asgerf · web-flow · commit 357e1c08025d · 2021-04-20T19:57:47.000+02:00
Co-authored-by: Asger F &lt;asgerf@github.com&gt;
diff --git a/javascript/ql/src/semmle/javascript/frameworks/Markdown.qll b/javascript/ql/src/semmle/javascript/frameworks/Markdown.qll
@@ -139,7 +139,7 @@ private module MarkdownIt {
     exists(API::CallNode call |
       call = markdownIt().getMember(["use", "set", "configure", "enable", "disable"]).getACall() and
       result = call.getReturn() and
-      not call.getParameter(0).getARhs().getALocalSource() =
+      not call.getParameter(0).getAValueReachingRhs() =
         DataFlow::moduleImport("markdown-it-sanitizer")
     )
   }

Original file line number	Diff line number	Diff line change
`@@ -139,7 +139,7 @@ private module MarkdownIt {`
`139`	`139`	`exists(API::CallNode call \|`
`140`	`140`	`call = markdownIt().getMember(["use", "set", "configure", "enable", "disable"]).getACall() and`
`141`	`141`	`result = call.getReturn() and`
`142`		`- not call.getParameter(0).getARhs().getALocalSource() =`
	`142`	`+ not call.getParameter(0).getAValueReachingRhs() =`
`143`	`143`	`DataFlow::moduleImport("markdown-it-sanitizer")`
`144`	`144`	`)`
`145`	`145`	`}`